Skills/ClawHub/ai-agent-governance

ai-agent-governance@1.0.4

VERIFIED

Publisher claims: "A practical playbook for AI agent governance — identifying agent risks (overreach, escape, misuse, hallucination chains), running governance across the full lifecycle from design to retirement, and assigning accountability under China's 2026 agent policy, Singapore's Agentic AI framework, the EU AI Act and NIST's agent standards work. A practical playbook for AI agent governance — identifying agent risks (overreach, escape, misuse, hallucination chains), running governance across the full lifecycle from design to retirement, and assigning accountability under China's 2026 agent policy, Singapore's Agentic AI framework, the EU AI Act and NIST's agent standards work. Includes registration and risk-assessment templates, least-privilege design and tool-call guardrails, an incident-response process, and a zero-dependency toolkit that scores governance maturity. For managers, compliance, legal, security and AI engineering leads. AI 智能体(Agent)治理实操手册——覆盖 Agent 风险识别(越权/逃逸/滥用/幻觉链)、Agent 全生命周期治理(设计→部署→运行→退役)、责任分配与监管合规(中国 2026-05 智能体规范应用与创新发展实施意见、新加坡 2026-05 Agentic AI 治理框架、欧盟 AI Act 延伸、美国 NIST AI Agent 标准倡议),含 Agent 应用登记与风险评估表、权限最小化与工具调用护栏、事件响应流程,附零依赖本地工具一键生成 Agent 风险清单、权限评估与治理成熟度评分。面向企业管理者、合规、法务、信息安全与 AI 工程负责人。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhaoxinghua09-cell · joined 10 days agoInstalls 170Last detonated 2 h ago
$clawhub install ai-agent-governance
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
Python subprocess execution detectedverify/agent_gov_quality_test.py:55 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedverify/agent_gov_quality_test.py:51 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedverify/agent_gov_quality_test.py:62 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedverify/agent_gov_quality_test.py:66 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedverify/agent_gov_quality_test.py:59 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈1,834 tok
1 file · 19 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

ai-agent-governance@1.0.4 safety verdict: Verified 87/100 — KillerSkills